Responsible for 24x7/16x7 security monitoring, initial incident triage, endpoint health monitoring, DLP monitoring, user activity monitoring, ticket handling, and timely escalation to L2 while ensuring strict SLA compliance.
- Monitor SentinelOne MDR console for real-time malware, behavior abnormalities, and ransomware alerts.
- Monitor Trend Micro Server Security agent health, signature updates, and critical server malware events.
- Review and triage Netskope DLP, Proxy, and Secure Web Gateway (SWG) policy violation alerts.
- Monitor privileged account activities and anomalous session initiations from CyberArk PAM
- Track identity events, failed logins, and modifications from Skillmine IDAM and Active Directory
- Validate endpoint policy compliance, ensuring security posture updates are pushed correctly.
- Perform initial Indicators of Compromise (IOC)
validation and multi-source event correlation.
- Create, classify, prioritize, and systematically assign security incidents within the ticketing tool.
- Execute authorized first-level containment actions (such as host isolation, account locking, and IOC blocking) strictly following Standard Operating Procedures (SOPs).
- Verify Antivirus (AV) signature currency and general health status across all active endpoint agents.
Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.